Operated by Berger & Berger Global Enterprises Corp. Updated September 30, 2026.
The main kingdom is online. Sign in with Apple creates or recovers your account. We do not request your Apple name or email. We verify Apple's signed identity and authorization code, store a hashed Apple user identifier, encrypted Apple refresh grant, and hashed game session credentials. Sessions are kept in the iOS Keychain.
Your chosen fictional town name, region, trade offers, material origins, published building levels, free town style and any earned Market Seals are visible to other players. Please do not use personal information as a town name. Our Cloudflare service stores your buildings, resources, coins, production rules, journeys and recent game events. Cloudflare processes connection data including IP addresses to serve and protect the game.
Your saved trading-partner list is private to your account. We store up to 20 stable town identifiers, without cached partner names. It is retained when you recover or reset your kingdom. A bounded latest-action receipt can retain a target town identifier until another accepted action replaces it or your own account is deleted.
Safety settings store up to 50 private blocked-town identifiers and an independent bounded latest command receipt. Blocks hide the chosen counterparty and prevent new trades in either direction; your owned goods and completed trades remain valid. Lists survive kingdom resets and account recovery. Reports contain a fixed reason, the target content revision and small server-derived name-revision or transaction evidence, without a free-text box. We keep at most 10 unexpired reports per reporter, at most five new distinct reports per UTC day, and at most 500 reports in this beta realm. Reports expire after 30 days, including reports awaiting review.
Owner review can replace a public name, restrict public interactions or restore them. Reports do not automatically remove a town and do not promise a response time. Restricted towns retain private production, owned cleanup and account controls. The bounded decision log retains up to 200 decisions for at most 30 days; active restrictions and replacement metadata, plus a latest technical operator receipt, remain with the account or current legacy/resident town until changed or removed. Neither reports nor blocks award goods or currency.
When capital projects are available, the shared landmark progress contains aggregate material quantities and stage times. Your contribution quantities and capped Market service credits are private account records retained across kingdom restarts. Account deletion removes that private linkage and your personal seal display; already-consumed aggregate materials and completed landmarks remain.
Your old local prototype save stays on your device as a backup. It is not imported into the online economy. The former guest frontier is retained for older beta builds, separately from the main kingdom market.
There are no advertising or tracking SDKs, and we do not sell personal data. In Settings, Start a new kingdom resets only your own progress while keeping your account. Delete my account removes your town, offers and purchase requests, ends its sessions and revokes this app's Apple grant. Deletion removes its safety row, submitted reports, reports about its town and identifying review events. Its identifier is removed from surviving saved-partner and block lists, and surviving latest safety receipts referring to it are redacted to an unavailable target. Completed-landmark aggregates remain. Completed trades and other players' goods are retained. Cloudflare backups may retain prior data temporarily. Current outbound labels resolve stable identifiers to safe current names; removed sources use a generic former-town label. An explicit bounded migration can replace ambiguous unbound copied names and historical journal labels, while preserving economic quantities and exact retry identity. That migration requires a reviewed checkpoint; local backups, offline caches and earlier platform backups cannot be remotely erased. This does not promise complete historical erasure.
For support or a data request: tolga@bergerandbergerglobal.com.